Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa
File: 338cbdf4-937d-41ee-8ec5-ca45e166a036.roa (raw, json)
Hash identifier: Au6fjJ+RNvxH8hkRhWlfz0BdEZzzHimWk0N4ffOIaiM=
Subject key identifier: D8:E9:7D:3C:15:27:7F:C2:8C:74:2D:0F:1D:2A:68:2B:D9:B7:40:87
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4DBF153C59188ED6CD299385AFBD6D48E58BB1BA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa
Signing time: Mon 11 Aug 2025 16:52:12 +0000
ROA not before: Mon 11 Aug 2025 16:52:12 +0000
ROA not after: Mon 15 Sep 2025 23:59:59 +0000
asID: 7224
IP address blocks: 193.57.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bf:15:3c:59:18:8e:d6:cd:29:93:85:af:bd:6d:48:e5:8b:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Aug 11 16:52:12 2025 GMT
Not After : Sep 15 23:59:59 2025 GMT
Subject: serialNumber=6c84f57094f37d2aeaca91b9e3c39819fab26aacec508713f4466a352f2fc532, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:30:72:40:9a:a1:b0:6e:93:36:7a:98:d2:
f3:ec:d0:24:84:57:42:d8:f3:d1:90:03:29:8d:83:
b9:90:24:9e:ed:25:8f:a3:d0:6c:11:ea:31:e9:bb:
a1:fd:6f:21:6e:08:ec:73:a9:ee:e2:2a:a2:56:f6:
05:cc:6f:d0:29:15:c8:16:70:17:eb:32:60:00:8a:
58:24:0c:3f:a0:52:86:4a:95:a4:fb:9f:5d:0a:a6:
fa:9b:9e:ff:9f:54:aa:45:59:0d:33:26:42:5f:86:
64:75:79:2d:f9:5b:f1:1b:c4:10:12:54:0c:cf:10:
e4:b3:b3:19:39:a0:ae:ba:f9:f7:d0:1d:c2:b6:0f:
cb:96:83:ef:68:69:d9:4b:d1:88:dc:ea:01:36:b5:
f2:3b:55:83:bb:8b:a8:c9:3a:50:2e:6a:49:f1:18:
31:2c:9d:cb:30:9b:9b:99:35:27:90:f8:58:ba:d4:
10:6c:81:1a:19:f6:51:d5:3a:8e:e7:8c:18:68:2c:
e8:ce:9b:22:bd:9a:05:e1:bf:b5:3d:2c:c1:01:aa:
2a:7e:57:11:b0:6c:48:2a:16:2f:fd:c1:4e:e3:9c:
25:94:70:7d:9a:27:a0:50:e1:48:7e:12:e4:f8:6d:
8a:4d:d2:59:33:3c:e1:48:f4:83:98:d8:98:4b:6d:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:7D:3C:15:27:7F:C2:8C:74:2D:0F:1D:2A:68:2B:D9:B7:40:87
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/338cbdf4-937d-41ee-8ec5-ca45e166a036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.182.0/23
Signature Algorithm: sha256WithRSAEncryption
05:5d:f2:a7:06:ec:f5:5f:09:e1:31:b3:d5:4e:c9:b9:68:9a:
6e:d4:27:69:c3:b5:2f:dd:6d:10:48:58:ad:8b:05:f3:7e:d6:
3e:95:ce:45:eb:eb:f1:96:1c:d7:11:00:f8:2d:ba:71:38:86:
b3:cb:4c:16:30:7d:35:6a:c4:07:b7:db:5b:f7:45:f6:b0:08:
98:f9:61:81:40:45:33:c4:67:74:ff:54:7c:e6:8e:f4:9f:09:
37:65:86:75:3e:76:e2:57:92:43:86:31:29:97:b7:78:7c:1f:
55:70:9d:0f:90:ac:f6:56:3a:bc:9c:6a:2d:8c:a4:46:9d:eb:
5c:33:21:e1:58:4b:d1:c9:53:ad:6d:59:d3:c4:5b:fc:19:87:
a0:60:0a:7f:39:69:97:6f:a6:c2:c3:60:74:21:fa:de:25:42:
fb:34:f3:e2:f1:8c:1e:46:89:05:63:4c:35:6d:a3:1a:92:c4:
9f:db:72:2a:c3:af:1a:97:b1:21:9d:a1:66:ba:3d:5a:b7:25:
74:66:c3:b0:49:5e:b9:e7:f2:6d:f2:2d:31:a6:ff:17:74:18:
03:37:bc:43:e8:61:a6:ec:57:b2:26:a9:31:86:00:43:bc:c3:
84:d2:3a:d8:c1:e4:a6:29:fb:fa:b5:bc:39:91:85:99:21:55:
b6:30:7d:ce
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUTb8VPFkYjtbNKZOFr71tSOWLsbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA4MTExNjUyMTJaFw0yNTA5MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDZjODRmNTcwOTRmMzdkMmFlYWNhOTFiOWUzYzM5ODE5ZmFiMjZhYWNlYzUw
ODcxM2Y0NDY2YTM1MmYyZmM1MzIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzgMHJAmqGwbpM2epjS8+zQJIRXQtjz0ZADKY2DuZAknu0lj6PQbBHqMem7
of1vIW4I7HOp7uIqolb2Bcxv0CkVyBZwF+syYACKWCQMP6BShkqVpPufXQqm+pue
/59UqkVZDTMmQl+GZHV5Lflb8RvEEBJUDM8Q5LOzGTmgrrr599AdwrYPy5aD72hp
2UvRiNzqATa18jtVg7uLqMk6UC5qSfEYMSydyzCbm5k1J5D4WLrUEGyBGhn2UdU6
jueMGGgs6M6bIr2aBeG/tT0swQGqKn5XEbBsSCoWL/3BTuOcJZRwfZonoFDhSH4S
5Phtik3SWTM84Uj0g5jYmEttTEUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTY6X08
FSd/wox0LQ8dKmgr2bdAhzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzM4Y2JkZjQtOTM3ZC00MWVlLThlYzUtY2E0NWUxNjZhMDM2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcE5tjAN
BgkqhkiG9w0BAQsFAAOCAQEABV3ypwbs9V8J4TGz1U7JuWiabtQnacO1L91tEEhY
rYsF837WPpXORevr8ZYc1xEA+C26cTiGs8tMFjB9NWrEB7fbW/dF9rAImPlhgUBF
M8RndP9UfOaO9J8JN2WGdT524leSQ4YxKZe3eHwfVXCdD5Cs9lY6vJxqLYykRp3r
XDMh4VhL0clTrW1Z08Rb/BmHoGAKfzlpl2+mwsNgdCH63iVC+zTz4vGMHkaJBWNM
NW2jGpLEn9tyKsOvGpexIZ2hZro9WrcldGbDsEleuefybfItMab/F3QYAze8Q+hh
puxXsiapMYYAQ7zDhNI62MHkpin7+rW8OZGFmSFVtjB9zg==
-----END CERTIFICATE-----
Generated at Thu Aug 21 22:13:29 2025 by rpki-client